🟢 Low ⏱ 5–15 min Last verified: 29 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-1502 Upstream summary: Double free vulnerability in the PyPAM_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service (application crash) or […]
🟢 Low ⏱ 5–15 min Last verified: 29 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23556 Upstream summary: The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus […]
🟢 Low ⏱ 5–15 min Last verified: 29 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-15552 Upstream summary: An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution. Table of contents Symptom […]
🟠 High ⏱ 15–60 min Last verified: 29 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2016-8568 CVE-2016-8569 CVE-2019-16760 CVE-2022-36113 CVE-2022-36114 +3 more Upstream summary: Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Gentoo Linux 📖 ~4 min read • Source: Gentoo GLSA GLSA-202412-07 Related CVEs: CVE-2023-22006 CVE-2023-22025 CVE-2023-22036 CVE-2023-22041 CVE-2023-22044 CVE-2023-22045 CVE-2023-22049 CVE-2023-22067 +12 more Upstream summary: Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Table […]
🟠 High ⏱ 15–60 min Last verified: 29 December 2023 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-12938 Related CVEs: CVE-2023-22081 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2023-22067 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2023-007 Related CVEs: CVE-2022-48425 CVE-2023-2124 CVE-2023-32233 Upstream summary: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. (CVE-2022-48425) […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 1.28.17-r3 📖 ~4 min read • Source: Alpine secdb entry — cups-filters 1.28.17-r3 Related CVEs: CVE-2023-24805 Upstream summary: Alpine community repository for vedge ships cups-filters 1.28.17-r3 which addresses CVE-2023-24805. Table of contents Symptom & Impact Environment […]
🟡 Medium ⏱ 10–30 min Last verified: 28 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7943 CVE-2021-27019 CVE-2021-27021 Upstream summary: Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. […]
🟡 Medium ⏱ 10–30 min Last verified: 28 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-18345 CVE-2019-18346 CVE-2019-18347 Upstream summary: A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied […]
